The FailedTo dashboard is a simple Kibana
topN query on the
failed_to field. This field is created everytime logstash see something like “failed to do something“.
In the screenshot below, you may have noticed a lot of “Failed to write” which was actual SIOC alerts because of a storage issue.